CVE-2017-12171

CVE-2017-12171 is a vulnerability reported for Red Hat Enterprise Linux 6.9 with httpd 2.2.15-60. The regression causes comments in the Allow and Deny directives to be parsed incorrectly, potentially allowing a remote attacker to bypass access controls and gain access to a restricted HTTP resourc...

ottawastreetfarmersmarket.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653632 Description| Value ---|--- Affected Website:| ottawastreetfarmersmarket.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

porterspatch.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653612 Description| Value ---|--- Affected Website:| porterspatch.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

arkansas.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653479 Description| Value ---|--- Affected Website:| arkansas.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

CVE-2017-3181

CVE-2017-3181 affects multiple TIBCO Spotfire components: Spotfire Analyst 7.7.0; Connectors 7.6.0; Deployment Kit 7.7.0; Spotfire Desktop 7.6.0/7.7.0; Desktop Developer Edition 7.7.0; Desktop Language Packs 7.6.0/7.7.0; affected components include Spotfire Client and Spotfire Web Player Client. ...

NUUO NVRmini - upgrade_handle.php Remote Command Execution Vulnerability

Exploit for hardware platform in category web applications Exploit Title: NUUO NVR Unauthenticated Remote Code Execution Exploit Author: Berk Dusunur Vendor Homepage: http://www.nuuo.com/ Software Link: http://www.nuuo.com/ Affected Version: v2016 Tested on: Parrot OS CVE : N/A Proof Of Concept G...

pml.de XSS vulnerability

Open Bug Bounty ID: OBB-651818 Description| Value ---|--- Affected Website:| pml.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gatewaypga.bluegolf.com XSS vulnerability

Open Bug Bounty ID: OBB-651449 Description| Value ---|--- Affected Website:| gatewaypga.bluegolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

panasonic.hk XSS vulnerability

Open Bug Bounty ID: OBB-651387 Description| Value ---|--- Affected Website:| panasonic.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gertrudebell.ncl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-650564 Description| Value ---|--- Affected Website:| gertrudebell.ncl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www17.homeip.net XSS vulnerability

Open Bug Bounty ID: OBB-650391 Description| Value ---|--- Affected Website:| www17.homeip.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uk.maje.com XSS vulnerability

Open Bug Bounty ID: OBB-650315 Description| Value ---|--- Affected Website:| uk.maje.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kemminer.de XSS vulnerability

Open Bug Bounty ID: OBB-650199 Description| Value ---|--- Affected Website:| kemminer.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Smart SMS & Email Manager 3.3 - 'contact_type_id' SQL Injection

Exploit Title: Smart SMS & Email Manager v3.3 - SQL Injection Google Dork: N/A Date: 17.07.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/smart-sms-email-manager-ssem/14817919 Version: 3.3 Tested on: Kali linux...

websms.fm XSS vulnerability

Open Bug Bounty ID: OBB-649112 Description| Value ---|--- Affected Website:| websms.fm Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

womeninmanufacturing.org XSS vulnerability

Open Bug Bounty ID: OBB-648940 Description| Value ---|--- Affected Website:| womeninmanufacturing.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14334

manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766...

CVE-2018-0366

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0366

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...